Originally reported by Javier Nieto. An attacker can DOS a phpMyAdmin installation with enough looping using long passwords